$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa File: 3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa (raw, json) Hash identifier: MGC2zWnQh+IGw/bS/iH4CmYL+Jxtgthg9ccrdoEweoM= Subject key identifier: C0:E8:58:FE:27:32:0F:CB:8F:45:DA:8C:8E:56:83:22:5F:0F:C1:E4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BBA103941A2F941114DB2A300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 1225 IP address blocks: 128.241.192.0/21 maxlen: 21 204.2.140.0/22 maxlen: 24 2001:418:3ff::/64 maxlen: 64 2001:418:1439::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:39:41:a2:f9:41:11:4d:b2:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=ab65f3ee-8dd6-4c31-bd3b-a8803871dd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:fe:98:92:3b:e4:39:a7:33:56:f9:da:16: 51:12:c3:ff:ce:49:1c:17:82:c8:c9:4a:fe:7e:10: 95:d6:b9:2b:17:86:27:01:ce:49:55:81:14:e9:cb: e1:81:90:01:ba:e9:b8:ca:9f:53:0b:51:2e:c3:58: 96:09:44:7d:97:2f:fc:57:5e:55:34:79:4e:d4:c7: 8b:d3:e0:bf:6e:f8:55:e6:aa:b3:11:49:c6:06:2c: 44:a1:37:25:1f:a2:b2:b8:2c:c5:72:09:01:e9:ed: 98:3e:0a:52:fa:be:eb:40:cc:31:8b:38:f1:bc:a4: fb:00:45:7d:a5:72:cd:36:59:3c:bd:82:60:5b:4d: 99:bc:b0:bb:a5:1b:15:af:9a:2f:f1:8b:ad:b0:8c: 3b:4e:62:07:a4:48:52:b3:59:33:88:61:9b:0a:73: 6a:d8:58:2c:e2:20:b9:4e:8a:28:0e:69:04:f5:d1: e4:25:2a:c1:fd:6d:63:97:a7:53:2d:5d:2d:b2:41: b8:f8:09:eb:c2:9b:61:9b:ce:b8:06:23:e1:ab:d7: dc:00:d7:ca:ff:69:7c:1b:ce:b8:69:0d:31:c2:7d: 6a:d7:69:4f:f0:1c:db:15:cc:2d:4c:e6:44:20:99: cd:13:d1:c5:b6:f4:0b:8e:30:bd:59:f6:5e:f7:fd: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E8:58:FE:27:32:0F:CB:8F:45:DA:8C:8E:56:83:22:5F:0F:C1:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3f81a06a-75b3-3bd3-9ba2-892f370272b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.192.0/21 204.2.140.0/22 IPv6: 2001:418:3ff::/64 2001:418:1439::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ea:05:83:d0:89:64:1b:46:b4:88:c4:7d:51:ab:98:bf:cd: 7e:f1:b0:cb:b8:c5:db:9a:5a:16:66:75:3f:3c:46:df:04:85: 0c:cd:85:10:3e:62:18:92:21:39:41:56:56:ef:d8:45:d3:b0: 7c:93:d2:bd:fa:db:2b:5b:14:fa:70:bb:49:45:f3:fa:f7:3c: 98:be:95:41:20:14:97:39:f8:cf:04:2a:ef:32:cc:2a:74:37: df:cf:34:eb:4d:9c:49:aa:eb:8d:73:77:38:1d:79:48:e1:dc: 17:2e:1b:51:3f:66:45:78:f5:cb:67:aa:37:65:0d:af:62:a2: 96:03:6c:16:01:a8:63:3a:59:15:eb:c2:25:1e:23:11:b4:ea: 5c:59:4a:b5:72:3d:fc:4c:6f:e5:15:01:b5:f3:58:80:4c:f6: 64:e9:5d:75:87:f0:a2:a4:df:a7:b1:36:56:bc:95:59:1f:56: 0f:c6:72:ca:60:4f:5d:75:43:69:34:0d:3e:9b:af:30:41:30: b6:c5:d9:e9:7d:dc:41:80:6b:8e:47:c2:9c:49:71:05:89:d3: 00:90:1d:7d:db:53:af:34:42:3b:71:a0:0e:8e:c1:5f:cb:1d: 13:85:12:c8:7e:10:80:8c:d9:87:8c:2f:60:b8:85:6c:ee:de: 43:ea:f5:04 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEu6EDlBovlBEU2yowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YWI2NWYzZWUtOGRkNi00YzMxLWJkM2ItYTg4MDM4NzFkZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xP+mJI75DmnM1b52hZREsP/zkkcF4LIyUr+ fhCV1rkrF4YnAc5JVYEU6cvhgZABuum4yp9TC1Euw1iWCUR9ly/8V15VNHlO1MeL 0+C/bvhV5qqzEUnGBixEoTclH6KyuCzFcgkB6e2YPgpS+r7rQMwxizjxvKT7AEV9 pXLNNlk8vYJgW02ZvLC7pRsVr5ov8YutsIw7TmIHpEhSs1kziGGbCnNq2Fgs4iC5 ToooDmkE9dHkJSrB/W1jl6dTLV0tskG4+Anrwpthm864BiPhq9fcANfK/2l8G864 aQ0xwn1q12lP8BzbFcwtTOZEIJnNE9HFtvQLjjC9WfZe9/3snQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFMDoWP4nMg/Lj0XajI5WgyJfD8HkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2Y4MWEwNmEtNzViMy0z YmQzLTliYTItODkyZjM3MDI3MmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQDgPHAAwQC zAKMMBoEAgACMBQDCQAgAQQYA/8AAAMHACABBBgUOTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA46gWD0Ilk G0a0iMR9UauYv81+8bDLuMXbmloWZnU/PEbfBIUMzYUQPmIYkiE5QVZW79hF07B8 k9K9+tsrWxT6cLtJRfP69zyYvpVBIBSXOfjPBCrvMswqdDffzzTrTZxJquuNc3c4 HXlI4dwXLhtRP2ZFePXLZ6o3ZQ2vYqKWA2wWAahjOlkV68IlHiMRtOpcWUq1cj38 TG/lFQG181iATPZk6V11h/CipN+nsTZWvJVZH1YPxnLKYE9ddUNpNA0+m68wQTC2 xdnpfdxBgGuOR8KcSXEFidMAkB1921OvNEI7caAOjsFfyx0ThRLIfhCAjNmHjC9g uIVs7t5D6vUE -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:20 2025 by rpki-client